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0. Introduction. 

In this paper we introduce a new method for finding Galois groups by computer. 
This is particularly effective in the case of Galois groups of p-extensions ramified 
at finitely many primes but unramified at the primes above p. Such Galois groups 
have been regarded as amongst the most mysterious objects in number theory [10]. 
Very little has hitherto been discovered regarding them despite their importance in 
studying p-adic Galois representations unramified at p. The conjectures of Fontaine- 
Mazur [7] say that they should have no p-adic analytic quotients (equivalently, 
the images of the Galois representations should always be finite), and there are 
generalizations due to the first author [3], [4], suggesting that they should instead 
have 'large' actions on certain trees. 

Below, we indicate how the method works in the case of 2-extensions of Q. 
This case is chosen since powers of 2 grow relatively slowly allowing us extensive 
computations. The idea is to modify the p-group generation algorithm [9] so that 
as it goes along, it uses number-theoretical information to eliminate groups that 
cannot arise as suitable quotients of the Galois group under investigation. In the 
best cases we obtain a short list of candidates for the Galois group. Two phenomena 
are worth noting. First, as noted in [5], the same groups turn up repeatedly. Second, 
even when the short list consists of more than one group, the candidates typically 
are so similar that most questions regarding them will yield the same answer. In 
this way, we can tell a lot about the Galois groups without always pinning them 
down exactly. 

Two items of progress are worth noting here. First, our exhaustive search allows 
us to go well beyond what was known previously, which was in general only the 
maximal nilpotency class 2 quotient of these Galois groups. Second, we obtain at 
least a conjectural characterization of the Galois group of the maximal 2-extension 
unramified outside {p, q} in most cases when p = 3 (mod 4) and q = 5 (mod 8). 

1. Some Basics. 



Let 5 be a finite set of odd primes. The maximal 2-extension of Q unramified 
outside S (allowing ramification at infinity) will be denoted by Qs and its Galois 
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group over Q by Gs- We seek to find Gs given a set S. We begin with some 
elementary results. 

Theorem 1. (1) For every finite index subgroup H of Gs, H/H' is finite. 
(2) [8] The generator rank d{Gs) equals the relator rank r{Gs)- Equivalently, 
Gs has trivial Schur multiplicator. 

Proof. (1) follows by class field theory, from the finiteness of certain ray class 
groups. (2) is a theorem of Shafarevich. 

Corollary. (1) If #5 = 1, then Gs is a finite cyclic group. 
(2) If #5 > 4, then Gs is infinite. (Golod-Shafarevich.) 

In [5], the first author and Perry exploited various circumstances in which a 
decomposition subgroup has index 1 or 2 in Gs- This led to the following families. 
(Here S = {p,q}.) 

Theorem 2. Assume that p = 3 (mod 4), g = 3 (mod 4), and without loss 
of generality (by quadratic reciprocity) p is a quadratic residue of q. If 2'' is the 
highest power of 2 dividing q^ — 1, then 

Gs= {a, b\a^ = b^' = 1, fe« = fe-i+2'"'), 

the semidihedral group of order 2'''^^. Further, we can take a to be complex conju- 
gation and b to be the generator of any inertia subgroup at q of Gs- 

Theorem 3. Assume that p = 3 (mod 4), q= 1 (mod 4), and (-1 = —1. If 
2*^ is the highest power of 2 dividing q — I, then 

Gs = M,+2(2) = {a,b\a' = b''^' =1, 6« = b'+''), 

the modular group of order 2'^+^. Further, we can take a to be complex conjugation 
and b to be the generator of any inertia subgroup at q of Gs- 

Theorem 4. Assume p = 3 (mod 4), 2''{k > 2) exactly divides q — 1, and either 

(1) fc = 2andpe (F/)^ 

or (2) A; > 3 and p e (F/)^ - (F/)^. 
Then 

Gs = Pk •-= {a, b\a^ = b~^ ababab^" ~^ a = 1 ) 

(presented as a pro-2 group), of order 2"^^^^ . Further, we can take a to be complex 
conjugation and b to be the generator of any inertia subgroup at q of Gs- 
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Note the tendency for Gs to belong to a small family of possibilities. This 
paper arose from the desire to study cases where Gs does not have a decomposition 
subgroup of small index. (It can be checked that the groups given below do not 
have any metacyclic subgroups of small index. Note that decomposition subgroups 
must be metacyclic here since all ramification is tame.) 

2. The Method. 



The idea is to modify O'Brien's p-group generation algorithm [9], which allows 
computer algebra systems such as MAGMA [2] to find systematically all p-groups 
with some property, e.g. all 2-groups with 2 generators and order < 1024. Our 
modification is to have the program save those descendants that satisfy various 
conditions coming out of the number theory. 

O'Brien's approach is to define, given p-group G, a sequence of characteristic 
subgroups by Pi{G) = G, P,{G) = P,-i{G)P{G,Pi-i{G)). Thus, G = Pi{G) > 
P2{G) > ••• The smallest c such that Pc+i(G) = {1} is called the p- class of G. Since 
the i-th term 7j((j) of the lower central series of a p-group G is contained in the 
i-th term Pi{G) of the lower p-central series, the p-class is bounded below by the 
nilpotency class. For most p-groups in question, Pi{G) = 7^(6*) for all but a few 
initial values of i, and so the p-class and nilpotency class are equal. 

A p-group H is called a descendant of G if H / Pc+i{H) = G, where c is the 
p-class of G. It is an immediate descendant if it has p-class c + 1. 

O'Brien's algorithm finds all immediate descendants of a given p-group G. 
These can be conveniently arranged in the form of a tree. For instance, the imme- 
diate descendants of C2 x C2 look like the following. 

(pclass 1) 




C2XC4 b^ - c^,c4 ■ ■ (P'^l-^^) 

This can then be iterated to give all p-class 3, then p-class 4, etc. descendants 
of C2 X C2. The tree contains each 2-group with 2 generators exactly once (up 
to isomorphism). The circle by the quaternion group, Qs, indicates that it is 
'terminal', i.e. has no descendants. The infinite ends of the tree yield infinite pro-2 
groups; for instance C2 x C2 ^ -D4 ^ Ds ^ ... has inverse limit the dihedral pro-2 
group. 

Our aim then is, given S, c, to compute a short list (hopefully just one group) 
of possibilities for the p-class c quotient G s / Pc+i{G s) ■ 

We impose three kinds of number-theoretical constraint on Gs. 

(I) (Top-end information) We can compute H /H' for H of small index in Gs 
(index < 2 by class field theory, < 16 by machine, e.g. KASH [6]). 

(II) (Local information) We know that Gs has inertial generators {r^ : p e 5} 
with the property that Tp is conjugate to r^. It also contains a complex conjugation 
Too of order 2. 

(III) (Multiplicator information) r{Gs) = d{Gs). 

Note that if we had been considering p-extensions ramified at p, then H/H' 
need not have been finite, which would make our approach much less effective. 
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3. An Example. 



The first case not covered by the explicit families above is that of 5 = {5, 19}. 
We attempt to compute Gs by O'Brien's program using the number-theoretical 
constraints above. 

First, we show that G s / P4,{G s) is a certain group P of order 64. This is done 
by showing that x'^^ - 70a;^^ + lieia;^^ ^ 5i25a;io ^ ggiOa;^ + llS'ix^ + 5235x4 + 
593a;^ + 25 has P as Galois group, that its root field is unramified outside 5, and 
that P has 2-class 3 and is not a quotient of any other 2-class 3 2-group. 

Second, we find the conjugacy classes of P where rs, rig. Too can lie. 

Third, we use KASH to compute H/H' for all subgroups H of index < 4 in 
Gs. 

All the above goes in an input file. Our program now finds all immediate 
descendants of P and tests them for 3 properties: 

(i) that they contain elements a;5,a;i9 that are respectively conjugate to their 
5th and 19th powers and a^oo of order 2 such that their images in P are in the 
conjugacy classes found above, 

(ii) that the abelianizations of their subgroups of index < 4 are smaller than 
(i.e. quotients of) the abelianizations of the corresponding subgroups of Gs, 

(iii) that their nuclear rank differs from their 2-multiplicator rank by at most 
2 (see [9] for definitions of these terms). 

Each group that passes all three tests is then saved, its immediate descendants 
computed, and the tests repeated on these. The search is done by depth first so as 
to save on storage. For large enough 2-class (ii) can be refined, since at this depth 
the abelianizations must actually equal those of the corresponding subgroups of 
Gs. 

This continues until we reach groups with abelianizations of their subgroups 
of index < 4 exactly right and with trivial Schur multiplicator (which implies that 
the group is terminal). These groups are then candidates for Gs. 

If the process terminates, then we know that Gs is finite and is one of the 
candidate groups. It might happen, however, that the process does not terminate 
in a reasonable length of time. In that case, it could be that there are infinite 
groups satisfying our number-theoretical constraints or that there are only finite 
groups but their p-class is so large that they have yet to be reached. The input file 
to our program contains a limit for the p-class, which can be adjusted. In the case 
of {5, 19}, the process terminates in groups of 2-class 11. 

Here is what the tree for S = {5, 19} looks like. The numbers next to the 
nodes give the exponents of the orders. A circle around a node means that none 
of the group's descendants pass all three tests and that the group itself cannot be 
Gs. A square around a node means that we have reached a group that satisfies 
everything Gs is known to satisfy. 
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The Tree for S={5,19}. 




Theorem 5. If S' = {5, 19}, then Gs is of order 2^^ and 2-class (indeed nilpo- 
tency class) 11. In fact, it is isomorphic to {a,b : a^,bab^ab~^ab^ab^ab~^ab^ab~^a) 
or to {a,b : a^,b~^ab~^ab^ab~^abab~^ab~^ab~^a). 



These two groups are very similar to each other. For instance, their lattices of 
subgroups of index < 32 (even with abelianizations attached) match. This makes 
them indistinguishable by top-end methods, i.e. by calculation in low degree sub- 
fields of Qs- The advantage of this, though, is that the answer to many questions 
about Gs can be given, since it is the same for either group. 



Remarks. (1) The largest metacyclic subgroup of Gs has order 2^ and so 
decomposition subgroups have index at least 2^^. This means that the methods 
used in [5] for the earlier explicit families simply do not carry over. 

(2) In fact, if we only use abelianizations for subgroups of index < 2 (which 
can be computed by class field theory rather than by machine), then we get the 
same tree and the same two groups output. 

(3) Several other choices of S lead to the same tree and indeed the same pair 
of groups, e.g. {3, 37}, {3, 61}, {5, 59}, {5, 139}, {11, 53}, .... 



Next we compute some other trees. For S = {13,23}, we get the following. 
The same tree and groups are output for S = {13, 103}, {5, 199}, .... 
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The Tree for S={ 13,23}. 
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Theorem 6. If 5 = {13, 23}, {13, 103}, {5, 199}, 
and 2-class (indeed nilpotency class) 15. 



then Gq is of order 2^^ 



The tree for 5 = {5, 79} is as follows. 
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The Tree for S={ 5, 79}. 
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Theorem 7. If 5 
nilpotency class) 19. 



{5,79}, then Gs is of order 2^^ and 2-class (indeed 



It should be noted that no short presentations of these groups have been 
found. These trees and their output groups seem to fit into a pattern that we now 
formalize as a conjecture. (This pattern has been checked experimentally as far as 
S = {13,127}, i.e. k = 7.) 

First, note that by class field theory, if p = 3 (mod 4), q = 5 (mod 8), and p is 
a square but not a 4th power modulo q, then the abelianizations of the subgroups of 
index 2 are [4, 4], [2, 2, 2], [2, 2"](n > 4), corresponding to Q(v^), Q(v^), Q(\/^^) 
respectively. 

Suppose that n = 4 (as it does in all the cases above). 

Conjecture. There is a family of groups G{k) [k > 2) such that G{k) has 
order 2^^^+^ and nilpotency class Ak + 3, and such that if 2'' exactly divides p + 1 
(together with the other assumptions above), then Gs — G{k). 



The main problem is to identify the groups G{k). There are some simi- 
larities such as those noted above. Also, the number of generators of their nor- 
mal subgroups apparently never exceeds 4 and there is always a unique maximal 
abelian normal subgroup A{k) of order 2^^^+^. On the other hand, the struc- 
tures of G{ky/G{k)" and A{k) vary erratically. For A; = 2, 3, 4, 5, G{k)' /G{k)" 
is respectively [2, 4, 16], [8, 8, 8], [4, 16, 32], [4, 32, 64], whereas A{k) is respectively 
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[4, 4, 8, 32], [4, 8, 32, 32], [4, 16, 64, 64], [4, 16, 256, 256]. 
4. The Case S = {p,q,r}. 

We now produce some cases with #5 = 3 and Gs infinite. The Fontaine- 
Mazur conjecture and its generalizations apply to this case. Our method yields 
large quotients of Gs against which to test out these conjectures. 

Suppose p,q,r = 3 (mod 4). This keeps Gs/G'g small, namely C2 x C2 x C2. 
The theory now comes in two fiavors according as 



(a) {p,q,r} can be ordered so that (-) 

(b) they cannot. 



(f) 



(por 



Case (a). 

In this case, Gs is apparently always finite. Consider, for example, S = 
{3, 11, 19}. The abelianizations for the seven subgroups of index 2 consist of [4,4] 
once, [2, 2, 4] three times, and [2, 2, 8] three times. Taking as input the 2-class 1 
quotient P = Gs/P2{Gs) = C2 x C2 x C2, our method yields the following tree. 

TreeforS={3,ll,19}. 




Theorem 8. If S 

nilpotency class) 5. 



{3, 11, 19}, then Gs is of order 2 and 2-class (indeed 



Once again, it is hard to tell which of the four groups output is actually Gs, 
but once again it does not matter for many purposes since the answer to many 
questions about them yields the same answer. 

Case (b). 

In this case, Gs is always infinite. This is because a subgroup of index 2 has 
abelianization [2,2,2,2] and has as fixed field an imaginary quadratic field and then 
we apply the result of Shafarevich that such a subgroup must have 4 generators 
and 4 relations and hence be infinite by Golod-Shafarevich. 



Let e.g. S = {3,19,43}. In this case the abelianizations of the index 2 
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subgroups are as small as they can be, namely [4, 4] once, [2, 2, 4] three times, and 
[2,2,2,2] three times. If we start with the 2-class 2 quotient P = Gs/Pz{Gs) of 
order 64, then we get a tree as follows: 

Tree for S={ 3, 19,43}. 




Comments. (1) The method has been used successfully in the case of 3- 
groups. For instance, in the case of three primes S = {p, g, r} that are 1 (mod 3) 
but not 1 (mod 9) , the first author has computed many cases of the Galois group 
of the maximal 3-extension unramified outside S. In each case, we obtain a finite 
group, in agreement with the result of Andoskii-Cvetkov [1], which says that this 
group is either finite or isomorphic to F := ker(5L(2, Z3) -^ SL(2^'F^)). The 
latter would contradict the Fontaine-Mazur conjecture. This situation is explored 
in greater detail in joint work by the first author and Farshid Hajir. 

(2) The Andoskii-Cvetkov groups have the interesting property that they form 
a family of 3-groups (in fact with 3 replaced by any odd prime) G := G{n) such that 
G/Pn{G) is isomorphic to F/P„(r) where F is the above congruence subgroup. This 
suggests that in general the groups arising might fall into families with G/Pn{G) 
isomorphic to H/Pn{H) for some infinite 'governing' group H. For instance, for our 
family in theorem 4, such a role is played hy H = {a^b \ a?' = b~^ababab~^a = 1) 
(we simply take the 2-adic limit of the given relation). This is the 2-adic space 
group Z2I C2. Unfortunately, there is no obvious candidate for such a governing 
group for our family in Section 3. 

This unfortunately means that F satisfies the three key properties we use 
to find our Galois groups. In other words, there exists S such that the top-end 
information matches that of F, and it is easy to see that F is generated by elements 
X such that x is conjugate to x"- for some n > 1 and that d{T) = r(F) = 3. Perhaps 
there is some additional piece of information we have overlooked that excludes F 
from being one of our Galois groups (in accord with the Fontaine-Mazur conjecture). 

(3) As Hajir has noted, Gs can be infinite even if ^S = 2, for instance, if 
S = {17, 101}. This follows by applying Golod-Shafarevich to the maximal real 
subfield of Q(Ci7)- This introduces the interesting possibility of constructing a 
family of examples for which the first few are finite and can be found explicitly but 
the later ones are infinite. For instance, {17, 101} might be in a family with general 
term {p, 6p — 1} with 2'' exactly dividing p—1. The first term is e.g. S = {5, 29} and 
we intend to compute Gs once some computer glitches are overcome. Replacing the 
4 by 16 (somehow) in the presentation yields a guess for Gs when 5 = {17, 101}. 



5. Impact on the Fontaine-Mazur Conjecture and its Generaliza- 
tions. 
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Let W be the automorphism group of the binary rooted tree. In other words, 
we set Wi = C2 and Wn = Wn-i I C2, so that Wn is isomorphic to the Sylow 2- 
subgroup of the symmetric group on 2" letters. The exponent of its order is 2" — 1. 
Let W = \im^Wn. 

If G is a closed subgroup of W, its Hausdorff dimension is defined to be 
lim infyt^oo 1° | w" ' where Gn is the image of G in Wn- The first author has made 
the following conjecture regarding Gs [4]. (Note that a just-infinite pro-p group is 
one that is infinite but all of its proper quotients are finite.) 

Conjecture. The just-infinite quotients of Gs are isomorphic to closed sub- 
groups of W of nonzero Hausdorff dimension. 

Note that this implies the Fontaine-Mazur conjecture in this case, in that a 
2-adic analytic group cannot embed in W with nonzero Hausdorff dimension. (The 
conjecture amounts to saying that the just-infinite quotients of Gs are Grigorchuk's 
branch groups, together with a conjectural characterization of branch groups in 
terms of Hausdorff dimension.) 

The conjecture also implies that if Gs is infinite, then there exists a repre- 
sentation Gs -^ W with image of nonzero Hausdorff dimension. We use our new 
computational tools to test this out. 

Example. Let S = {3, 19, 43}. Let f = x^^ - Ax^^ + lOa;^^ + Ux^^ - 42x^^ - 
20a;^o + 80a;9 + 15^^ - lOOa;^ + lOa;^ + TSa;^ - 25a;^ - 26x3 + 9x^ - 10a; + 13. Its Galois 
group is a 2-group since its root field has subfields of every index. The splitting 
of the polynomial modulo various primes tells us by van der Waerden's method 
that its Galois group contains elements with various cycle structures. Using the 
MAGMA database of transitive groups of degree 16, we find there is exactly one 
subgroup of W4 that contains elements with all these cycle structures and that has 
abelianization C2 x C2 x C2. This then gives us a map from Gs -^ W4 with image 
TransitiveGroup(16, 1735) of order 2^^. 
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